[openssl-users] Problems on authentication during TLS handshake

[Viktor Dukhovni]

On Tue, Jan 08, 2019 at 12:38:32AM -0800, Jin Xie wrote:

> As for “in which case it will use the public key as a stand-in for the
> missing private key”, do you mean use “client cert public key” instead of
> “client cert private key”? If so is it possible that I pass “client cert
> public key” in “SSL_CTX_use_PrivateKey_file”? (I’m running on 1.1 :(((( )

With engines, you have to use ENGINE_load_private_key(), and then
SSL_CTX_use_PrivateKey().

See the code in apps/s_client.c and load_key() in apps/apps.c.

-- 
	Viktor.